Aubio is vulnerable to denial of service via aubio_source_avcodec_readframe function

2022-05-1402:59:32

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.8%

JSON

An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_source_avcodec_readframe in io/source_avcodec.c, as demonstrated by aubiomfcc.

CPENameOperatorVersion
aubioeq0.4.3
aubioeq0.4.4
aubioeq0.4.3a2
aubioeq0.4.5
aubioeq0.4.3a1
aubioeq0.4.3.post1
aubioeq0.4.6

Name	Operator	Version
aubio	eq	0.4.3
aubio	eq	0.4.4
aubio	eq	0.4.3a2
aubio	eq	0.4.5
aubio	eq	0.4.3a1
aubio	eq	0.4.3.post1
aubio	eq	0.4.6

References

github.com/aubio/aubio

github.com/aubio/aubio/commit/a81b12a3b4174953b3bc7ef4c37103f4d5636740

github.com/aubio/aubio/issues/187

nvd.nist.gov/vuln/detail/CVE-2018-14521